simple server with authentication